I attempted to run the following in order to roll hot to warm buckets, tested with all indexes and also specific indexes to validate what I was seeing: splunk search "| debug cmd=roll" OR splunk search "| debug cmd=roll index=fw" and received results 'FATAL: Error in 'DebugCommand': Hot dbs rolled out to warm for index' I'm not finding any explanation for this or examples of expected results but am thinking this to be the case that there is nothing to roll? This is on a freshly installed system that I have moved all indexes.conf to indexes.conf.tmp and started splunk so I could ideally migrate old db data without having to play too much surgery. Since I'm fairly new to this I'd like to get any perspective before moving forward. Thanks. ... View more